Inspiring the world with innovation!
I see a lot of confusion over terms when it comes to threat modeling. The terms matter because they shape focus. For example if you confuse threats with attacks, you’ve limited what you’re looking for. There are the terms we used when we created our How To Threat Model Web Applications: Asset. An asset is …
Here’s my trying to explain threat modeling (actually core modeling) to a customer … My core theme of the modeling is this: Define what good looks like (e.g. objectives) Establish boundaries of good (constraints, goals — what can’t happen, what needs to happen, what’s nice to happen) Identify tests for success (define criteria … entry …
When people ask me my take on model-driven approaches, I think of two ends of the spectrum — human and the machine. Model for Humans For humans, I find using a whiteboard (whiteboard modeling) works well — it’s universal. Model for Machines For machines, I find speaking closer to the code is a good thing …
Your operating model is determined by your choices around how you handle integration and standardization for your business processes. Your choices around your operating model can dramatically influence and impact your ability to compete in the market. A clear operating model decision has a profound effect on how you implement your business processes and IT …
One of my new favorite books is, Enterprise Architecture as Strategy, by Jeanee W. Ross, Peter Weill, and David C. Robertson. My colleague, Danny Cohen recommended it as one of the best books on enterprise strategy and I agree. A big focus of the book is on execution and how to build a strong foundation …
